# Audit log of who deployed flows

**URL:** <https://discourse.nodered.org/t/audit-log-of-who-deployed-flows/66302>\
**Category:** General\
**Created:** [10 August 2022 22:45 UTC](https://discourse.nodered.org/t/audit-log-of-who-deployed-flows/66302 "2022-08-10T22:45:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![GregHNZ](https://avatars.discourse-cdn.com/v4/letter/g/fbc32d/32.png) [@GregHNZ](https://discourse.nodered.org/u/GregHNZ)\
**Post date:** [10 August 2022 22:45 UTC](https://discourse.nodered.org/t/audit-log-of-who-deployed-flows/66302/1 "2022-08-10T22:45:35Z")

</div>

Hi  
We have a request from our SecOps team questioning whether it is possible to audit who deployed nodes, this is in the event a malicious action is performed so we can trace who did it.

With Editor security enabled [Securing Node-RED : Node-RED](https://nodered.org/docs/user-guide/runtime/securing-node-red) does the name of the user and the flows being deployed get logged anywhere?

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [10 August 2022 23:51 UTC](https://discourse.nodered.org/t/audit-log-of-who-deployed-flows/66302/2 "2022-08-10T23:51:40Z")

</div>

Hi @GregHNZ

You can enable audit level logging via the settings file: [Logging : Node-RED](https://nodered.org/docs/user-guide/runtime/logging#audit)

That will log all API access by the editor, including the username.

It doesn't log the details of the flows being deployed, just that a deploy was done.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [9 October 2022 23:52 UTC](https://discourse.nodered.org/t/audit-log-of-who-deployed-flows/66302/3 "2022-10-09T23:52:28Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
